Exclude password from user edit